Currently exploited vulnerabilities

CVE ID CVSS3.1 Exploitable Vendor Product Vulnerability Date added
CVE-2026-20127 10.0 True Cisco Catalyst SD-WAN Controller and Manager Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability 2026-02-25 00:00:00
CVE-2022-20775 7.8 True Cisco SD-WAN Cisco SD-WAN Path Traversal Vulnerability 2026-02-25 00:00:00
CVE-2026-20045 8.2 True Cisco Unified Communications Manager Cisco Unified Communications Products Code Injection Vulnerability 2026-01-21 00:00:00
CVE-2025-20393 10.0 True Cisco Multiple Products Cisco Multiple Products Improper Input Validation Vulnerability 2025-12-17 00:00:00
CVE-2025-20352 7.7 True Cisco IOS and IOS XE Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability 2025-09-29 00:00:00
CVE-2025-20333 9.9 True Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability 2025-09-25 00:00:00
CVE-2025-20362 6.5 True Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability 2025-09-25 00:00:00
CVE-2025-20281 10.0 True Cisco Identity Services Engine Cisco Identity Services Engine Injection Vulnerability 2025-07-28 00:00:00
CVE-2025-20337 10.0 True Cisco Identity Services Engine Cisco Identity Services Engine Injection Vulnerability 2025-07-28 00:00:00
CVE-2024-20439 9.8 True Cisco Smart Licensing Utility Cisco Smart Licensing Utility Static Credential Vulnerability 2025-03-31 00:00:00
CVE-2023-20118 6.5 True Cisco Small Business RV Series Routers Cisco Small Business RV Series Routers Command Injection Vulnerability 2025-03-03 00:00:00
CVE-2014-2120 5.4 True Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability 2024-11-12 00:00:00
CVE-2024-20481 5.8 True Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial-of-Service Vulnerability 2024-10-24 00:00:00
CVE-2024-20399 6.0 True Cisco NX-OS Cisco NX-OS Command Injection Vulnerability 2024-07-02 00:00:00
CVE-2024-20353 8.6 True Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Denial of Service Vulnerability 2024-04-24 00:00:00
CVE-2024-20359 6.0 True Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Privilege Escalation Vulnerability 2024-04-24 00:00:00
CVE-2020-3259 7.5 True Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Information Disclosure Vulnerability 2024-02-15 00:00:00
CVE-2023-20273 7.2 True Cisco Cisco IOS XE Web UI Cisco IOS XE Web UI Command Injection Vulnerability 2023-10-23 00:00:00
CVE-2023-20198 10.0 True Cisco IOS XE Web UI Cisco IOS XE Web UI Privilege Escalation Vulnerability 2023-10-16 00:00:00
CVE-2023-20109 6.6 True Cisco IOS and IOS XE Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability 2023-10-10 00:00:00
CVE-2023-20269 5.0 True Cisco Adaptive Security Appliance and Firepower Threat Defense Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability 2023-09-13 00:00:00
CVE-2016-6415 7.5 True Cisco IOS, IOS XR, and IOS XE Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability 2023-05-19 00:00:00
CVE-2004-1464 5.9 True Cisco IOS Cisco IOS Denial-of-Service Vulnerability 2023-05-19 00:00:00
CVE-2017-6742 8.8 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2023-04-19 00:00:00
CVE-2020-3153 6.5 True Cisco AnyConnect Secure Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability 2022-10-24 00:00:00
CVE-2020-3433 7.8 True Cisco AnyConnect Secure Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability 2022-10-24 00:00:00
CVE-2019-15271 8.8 True Cisco RV Series Routers Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability 2022-06-08 00:00:00
CVE-2016-6367 7.8 True Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability 2022-05-24 00:00:00
CVE-2016-6366 8.8 True Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability 2022-05-24 00:00:00
CVE-2022-20821 6.5 True Cisco IOS XR Cisco IOS XR Open Port Vulnerability 2022-05-23 00:00:00
CVE-2009-2055 5.9 True Cisco IOS XR Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability 2022-03-25 00:00:00
CVE-2010-3035 7.5 True Cisco IOS XR Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability 2022-03-25 00:00:00
CVE-2015-0666 7.5 True Cisco Prime Data Center Network Manager (DCNM) Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability 2022-03-25 00:00:00
CVE-2017-3881 9.8 True Cisco IOS and IOS XE Cisco IOS and IOS XE Remote Code Execution Vulnerability 2022-03-25 00:00:00
CVE-2018-0125 9.8 True Cisco VPN Routers Cisco VPN Routers Remote Code Execution Vulnerability 2022-03-25 00:00:00
CVE-2018-0147 9.8 True Cisco Secure Access Control System (ACS) Cisco Secure Access Control System Java Deserialization Vulnerability 2022-03-25 00:00:00
CVE-2017-12231 7.5 True Cisco IOS software Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-12232 6.5 True Cisco IOS software Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-12233 7.5 True Cisco IOS software Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-12234 7.5 True Cisco IOS software Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-12235 7.5 True Cisco IOS software Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-12237 7.5 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-12238 6.5 True Cisco Catalyst 6800 Series Switches Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-12240 9.8 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2017-12319 5.9 True Cisco IOS XE Software Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-6627 7.5 True Cisco IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-6663 6.5 True Cisco IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2017-6736 8.8 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2017-6737 8.8 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2017-6738 8.8 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2017-6739 8.8 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2017-6740 8.8 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2017-6743 8.8 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2017-6744 8.8 True Cisco IOS software Cisco IOS Software SNMP Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2018-0151 9.8 True Cisco IOS and IOS XE Software Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability 2022-03-03 00:00:00
CVE-2018-0154 7.5 True Cisco IOS Software Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2018-0155 8.6 True Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2018-0156 7.5 True Cisco IOS Software and Cisco IOS XE Software Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2018-0158 8.6 True Cisco IOS Software and Cisco IOS XE Software Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability 2022-03-03 00:00:00
CVE-2018-0159 7.5 True Cisco IOS Software and Cisco IOS XE Software Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2018-0161 6.3 True Cisco IOS Software Cisco IOS Software Resource Management Errors Vulnerability 2022-03-03 00:00:00
CVE-2018-0167 8.8 True Cisco IOS, XR, and XE Software Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability 2022-03-03 00:00:00
CVE-2018-0172 8.6 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software Improper Input Validation Vulnerability 2022-03-03 00:00:00
CVE-2018-0173 8.6 True Cisco IOS and IOS XE Software Cisco IOS and IOS XE Software Improper Input Validation Vulnerability 2022-03-03 00:00:00
CVE-2018-0174 8.6 True Cisco IOS XE Software Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability 2022-03-03 00:00:00
CVE-2018-0175 8.0 True Cisco IOS, XR, and XE Software Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability 2022-03-03 00:00:00
CVE-2018-0179 6.8 True Cisco IOS Software Cisco IOS Software Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2018-0180 6.8 True Cisco IOS Software Cisco IOS Software Denial-of-Service Vulnerability 2022-03-03 00:00:00
CVE-2019-1652 7.2 True Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Cisco Small Business Routers Improper Input Validation Vulnerability 2022-03-03 00:00:00
CVE-2022-20699 10.0 True Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 00:00:00
CVE-2022-20700 10.0 True Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 00:00:00
CVE-2022-20701 10.0 True Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 00:00:00
CVE-2022-20703 10.0 True Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 00:00:00
CVE-2022-20708 10.0 True Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability 2022-03-03 00:00:00
CVE-2018-0296 7.5 True Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability 2021-11-03 00:00:00
CVE-2019-1653 7.5 True Cisco Small Business RV320 and RV325 Routers Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability 2021-11-03 00:00:00
CVE-2020-3161 9.8 True Cisco Cisco IP Phones Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability 2021-11-03 00:00:00
CVE-2020-3569 8.6 True Cisco IOS XR Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability 2021-11-03 00:00:00
CVE-2020-3566 8.6 True Cisco IOS XR Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability 2021-11-03 00:00:00
CVE-2020-3118 8.8 True Cisco IOS XR Cisco IOS XR Software Discovery Protocol Format String Vulnerability 2021-11-03 00:00:00
CVE-2018-0171 7.5 True Cisco IOS and IOS XE Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability 2021-11-03 00:00:00
CVE-2021-1498 9.8 True Cisco HyperFlex HX Cisco HyperFlex HX Data Platform Command Injection Vulnerability 2021-11-03 00:00:00
CVE-2021-1497 9.8 True Cisco HyperFlex HX Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability 2021-11-03 00:00:00
CVE-2020-3580 6.1 True Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability 2021-11-03 00:00:00
CVE-2020-3452 7.5 True Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Read-Only Path Traversal Vulnerability 2021-11-03 00:00:00

AVET INS is an owner of VULNDBASE brand and website. This product uses data from the NVD API but is not endorsed or certified by the NVD. See NVD page for more information. CVE is a registered trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE site. CWE is a registered trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE page. KEV (Known Exploited Vulnerabilities) is a catalog maintained by CISA. EUVD is the official EU repository for timely, curated cybersecurity vulnerability intelligence and remediation guidance run by ENISA. DORA (Digital Operational Resilience Act) is and EU directive.

Copyright AVET INS 1997 - 2026